Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: HziST0yHD98NrsMC3X4vvNzbLv8ugH8NgCGlpy7Lkcw=
Subject key identifier: AD:B8:7A:40:FA:DE:C0:B9:41:37:1A:CF:22:E7:E0:BC:F7:DE:E4:6B
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 019772D1CD6604B4C446640F7703EBC48DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 159E
Signing time: Sun 15 Jun 2025 09:00:41 +0000
Manifest this update: Sun 15 Jun 2025 09:00:41 +0000
Manifest next update: Mon 16 Jun 2025 09:00:41 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: u7qqKgd9M8x611byuuXxc2M8GZC36gTCAouwcQOFcBI=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:cd:66:04:b4:c4:46:64:0f:77:03:eb:c4:8d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jun 15 09:00:41 2025 GMT
Not After : Jun 16 09:00:41 2025 GMT
Subject: CN=adb87a40fadec0b941371acf22e7e0bcf7dee46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:ba:60:4f:5a:0c:2d:c3:54:59:38:35:b1:
c2:70:bb:54:2f:e2:1e:22:9a:a9:43:d3:08:02:f2:
64:5a:a3:b9:05:20:49:73:6e:14:1d:5a:8c:9b:47:
4d:97:01:d8:03:40:29:7c:c4:10:b5:c2:d8:36:b3:
4f:3c:89:09:69:35:80:db:67:00:72:34:ed:e7:1b:
a8:ee:c8:d0:c8:e5:3e:36:90:99:fa:b6:cb:06:94:
c0:2d:5d:c4:42:3a:6d:16:25:0d:4b:14:50:85:62:
d6:dd:b7:b5:72:b5:a9:d9:ef:54:95:aa:f4:e3:c5:
fc:de:9e:bb:79:1c:64:32:6b:18:0f:73:2c:a7:19:
69:3d:8b:33:14:46:4a:6d:dd:ee:0c:ac:99:99:c6:
4a:ed:13:9a:b6:13:5e:7b:f4:cd:5a:f4:11:60:84:
ee:f7:ed:fd:05:eb:62:d3:7e:5a:d9:83:65:e0:49:
f2:cf:5f:28:cf:dc:88:65:a2:ab:14:65:4d:42:6e:
75:ff:24:5e:6a:c9:22:88:8d:0d:53:4a:9d:12:4f:
ff:7b:cf:16:84:95:0f:54:9d:83:92:35:83:34:8c:
83:c9:94:c3:44:4b:b0:b7:7f:00:4a:0a:4a:70:00:
d1:ec:a4:87:ad:08:45:de:ba:e1:9e:a2:a6:61:d2:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:7A:40:FA:DE:C0:B9:41:37:1A:CF:22:E7:E0:BC:F7:DE:E4:6B
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:3b:f6:fc:16:78:50:4c:c1:ae:ea:32:8d:c6:43:3e:76:
dc:af:b6:fc:44:3e:81:cf:c7:c0:42:66:02:35:db:7c:40:56:
7b:76:62:d0:31:28:9d:77:29:00:2e:cb:85:25:42:01:5f:1d:
20:35:86:df:53:a7:7f:f4:cd:47:fd:50:04:6f:bc:ab:73:15:
f5:6d:f3:9f:92:12:26:62:a8:76:ba:8a:6a:20:88:5d:33:57:
38:39:76:0d:41:9f:1e:48:18:39:be:fe:6d:a7:70:60:e0:61:
fc:0b:5e:bd:9f:f6:83:42:d7:6d:f8:3c:63:df:88:2d:16:ed:
17:af:48:25:85:3d:9e:15:df:b6:e4:71:be:b6:fa:fb:d3:8e:
d3:52:4f:b9:90:fa:81:c5:54:40:cf:e4:82:dd:5c:73:fc:e0:
7f:aa:5e:42:e1:74:f9:ec:62:a1:a9:8b:4e:8f:66:19:95:6f:
4f:d5:8a:35:b7:82:ee:17:79:22:85:bc:33:57:7d:b0:30:4b:
da:ac:3e:c7:ef:a0:86:74:df:e9:35:6f:ed:0e:09:a5:9d:2b:
df:98:1d:e9:a4:89:73:a7:28:60:fc:96:21:48:2a:8d:28:22:
5b:59:d7:9c:66:2a:b9:35:dc:1f:70:1f:86:7b:d2:21:a5:2c:
76:e9:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:34 2025 by rpki-client